Static task
static1
Behavioral task
behavioral1
Sample
a5dadf3092b4c9fd811c4b39fa3df053b0abe5ca05d830db1f656feb26815997.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a5dadf3092b4c9fd811c4b39fa3df053b0abe5ca05d830db1f656feb26815997.exe
Resource
win10v2004-20220812-en
General
-
Target
a5dadf3092b4c9fd811c4b39fa3df053b0abe5ca05d830db1f656feb26815997
-
Size
59KB
-
MD5
90e926ec6197464aa7e2a43490df7c7c
-
SHA1
374bed7acfb171ccc0bfeedeb62f5dedb7e42818
-
SHA256
a5dadf3092b4c9fd811c4b39fa3df053b0abe5ca05d830db1f656feb26815997
-
SHA512
0ea718b0e88179ca1c157994d8899562ebb58a00642b59b890f2289faa19e18e9e8741bec9bf098a17a867cf095c55bb63681d2360dde440fba6a6af8b3fafff
-
SSDEEP
1536:rSpogHUag8KITaA5OCxphTbV+wBUJZga:zag8d/xXhTbV+mUJZga
Malware Config
Signatures
Files
-
a5dadf3092b4c9fd811c4b39fa3df053b0abe5ca05d830db1f656feb26815997.exe windows x86
2dbf2551abfdff64e0e2c35bdbefdb52
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
tsad
TS_MgmtGetAdClickThroughURL
TS_UtilReadBMZ
TS_PushShutdown
TS_MgmtALDisplayResult
TS_MgmtALClick
TS_MgmtDestroyAL
TS_MgmtShutdown
TS_MgmtProgress
TS_UtilFreeBMZ
TS_MgmtInit
TS_MgmtCreateAL
TS_MgmtGetALStatus
TS_MgmtSetALStatus
TS_MgmtSetALCallbacks
TS_PushInit
TS_PushSetCallbacks
wsock32
WSAStartup
ioctlsocket
gethostbyname
WSACleanup
kernel32
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
MultiByteToWideChar
WideCharToMultiByte
SetHandleCount
FreeEnvironmentStringsA
FlushFileBuffers
CloseHandle
WaitForSingleObject
SetFileAttributesA
Sleep
UnhandledExceptionFilter
DeleteFileA
MoveFileA
ReadFile
SetFilePointer
CreateFileA
CreateProcessA
GetStartupInfoA
CreateEventA
SetEvent
GetModuleHandleA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalDeleteAtom
GetFileAttributesA
GlobalFree
GetTickCount
WriteFile
GetFileType
GetStdHandle
HeapFree
HeapAlloc
GetProcessHeap
CreateDirectoryA
ResetEvent
CreateThread
GetLastError
CreateMutexA
GetModuleFileNameA
SetThreadPriority
GetCurrentThread
CopyFileA
ExitProcess
OutputDebugStringA
FreeLibrary
VirtualAlloc
LoadLibraryA
GetVersionExA
GetStringTypeW
SetStdHandle
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetCurrentProcess
GlobalAddAtomA
GetProcAddress
HeapCreate
HeapDestroy
VirtualFree
GetCommandLineA
GetLocalTime
GetVersion
GetTimeZoneInformation
RtlUnwind
GetSystemTime
GetACP
GetOEMCP
GetCPInfo
TerminateProcess
user32
wvsprintfA
UnpackDDElParam
FreeDDElParam
DestroyWindow
GetWindowLongA
InvalidateRect
KillTimer
ShowWindow
RegisterClassA
CreateWindowExA
SetWindowLongA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
WaitForInputIdle
GetCapture
BeginPaint
EndPaint
WindowFromPoint
ReleaseCapture
ClientToScreen
IsWindow
SetCapture
SetTimer
AdjustWindowRect
LoadCursorA
SystemParametersInfoA
PostMessageA
PeekMessageA
DefWindowProcA
SendMessageA
gdi32
SetDIBitsToDevice
SelectPalette
CreatePalette
RealizePalette
advapi32
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
shell32
ShellExecuteA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ